Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/A7Cn9E3p5l44_FSnMaCM3cMh22M.roa
File: A7Cn9E3p5l44_FSnMaCM3cMh22M.roa (raw, json)
Hash identifier: FIPv/i5n7n5k9I9COr5C/uTVCYwdFl+i0dfVhdNCvEY=
Subject key identifier: 03:B0:A7:F4:4D:E9:E6:5E:38:FC:54:A7:31:A0:8C:DD:C3:21:DB:63
Certificate issuer: /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial: 019280
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/A7Cn9E3p5l44_FSnMaCM3cMh22M.roa
Signing time: Thu 24 Feb 2022 11:27:16 +0000
ROA not before: Thu 24 Feb 2022 11:27:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41424
IP address blocks: 193.41.33.0/24 maxlen: 24
89.207.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103040 (0x19280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Validity
Not Before: Feb 24 11:27:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03b0a7f44de9e65e38fc54a731a08cddc321db63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:44:ab:8e:60:89:0e:c1:42:0b:e4:a0:67:
2b:6a:55:41:5a:59:99:d6:2b:d7:49:b8:b9:d0:64:
fc:b9:6f:e8:ad:9c:e8:ef:2f:6c:57:c2:e8:f8:c0:
17:78:80:a0:c4:c6:97:d0:15:a6:eb:21:81:2d:0e:
06:be:d1:e0:d5:7c:e1:14:70:3e:91:85:2d:d1:11:
18:92:c6:d9:ce:05:d5:f8:79:2f:6c:bf:dc:32:ab:
a9:b2:78:6e:20:00:29:3c:6b:dc:c1:90:c8:ea:51:
cd:e3:b0:24:c4:a1:28:28:6f:e0:6c:73:33:04:4a:
0b:12:85:2e:4e:a4:f7:5c:95:c2:0a:30:0a:82:14:
9b:4f:10:d8:84:f4:6e:91:49:41:6f:95:96:fc:80:
14:5c:0b:18:be:c2:70:dd:d2:5d:2f:0f:0c:66:a7:
da:0f:4e:17:1e:ae:73:a0:48:29:0b:18:9d:b8:66:
21:f6:b5:ad:80:35:86:f9:91:7d:fd:24:93:3e:4d:
ee:01:1b:74:5d:ca:88:b0:a0:ed:2b:e6:f7:6d:ac:
cd:00:0c:0a:4a:f9:fa:62:d8:fa:32:6c:e7:1a:31:
0f:f4:32:1f:23:9d:52:f2:ce:46:78:c7:0c:d7:93:
84:1d:99:cf:78:ef:6a:ab:c2:6b:9c:59:88:21:51:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B0:A7:F4:4D:E9:E6:5E:38:FC:54:A7:31:A0:8C:DD:C3:21:DB:63
X509v3 Authority Key Identifier:
keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/A7Cn9E3p5l44_FSnMaCM3cMh22M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.240.0/21
193.41.33.0/24
Signature Algorithm: sha256WithRSAEncryption
18:00:7b:57:85:57:76:40:82:6d:71:44:44:f5:5d:9d:b3:e4:
a6:4a:d9:ca:2f:b5:cd:72:fb:bd:ec:18:96:b8:05:ce:52:91:
55:85:31:66:be:a7:ae:6e:4b:87:3d:c1:63:92:f2:60:45:a7:
8f:f8:bb:0d:48:40:ae:66:60:10:b6:72:b7:22:8e:d6:d2:62:
05:48:e4:d0:24:8f:6c:b3:2c:3e:ea:da:3b:5e:cf:2d:e5:b6:
83:ac:9a:c6:ac:47:1d:70:12:18:16:62:6c:b7:d0:d4:6f:f6:
fa:d3:50:4e:2f:8b:78:44:33:f1:e0:2b:36:2b:fc:c6:32:56:
62:65:37:e3:6e:4e:70:cc:ac:64:d8:60:0a:39:b2:a7:45:67:
0d:46:f1:85:12:d1:63:6e:82:be:80:b8:42:e2:97:83:73:52:
8f:1f:7a:e7:b3:a1:2e:44:32:50:83:da:ff:ff:bb:4a:9d:26:
da:b8:b9:e1:c6:0f:94:f8:f9:bb:98:ee:4d:2d:c5:7c:f9:6e:
7a:0d:4e:97:ca:50:8a:75:57:5e:da:46:fc:fe:65:12:0b:1d:
ed:a3:5a:d3:b2:8f:5e:68:e7:d0:9a:08:cd:77:7c:02:3e:ad:
7f:61:83:2c:2c:f8:d7:df:d1:98:84:28:ec:97:96:99:fc:e1:
c1:b1:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:18 2024 by rpki-client on console-ams.rpki-client.org